opendev/system-config
Code Issues Proposed changes
14450f58e2
system-config/playbooks/roles/nameserver
History
Ian Wienand 0746dc187b nameserver: Allow master server to notify via ipv6 
Logs show that the nameservers are being notified via ipv6 and
rejecting the request:

  nsd[18851]: notify for acme.opendev.org. \
   from 2001:4800:7819:104:be76:4eff:fe04:43d0 refused, no acl matches.

Modify the nsd ACL to allow the ipv6 of the master to trigger updates.
This is important for the letsencrypt process, where we need the
acme.opendev.org domain updated in a timely fashion so that TXT
authentication works.

Change-Id: I785f9636dd05e15b8ffd211845f439be7e8344a3
2020-10-28 09:26:14 +00:00
..
handlers Configure opendev nameservers using ansible 2018-11-02 13:49:38 -07:00
tasks Update nsd systemd unit deps 2018-12-10 11:44:15 -08:00
templates nameserver: Allow master server to notify via ipv6 2020-10-28 09:26:14 +00:00
README.rst nameserver: Allow master server to notify via ipv6 2020-10-28 09:26:14 +00:00

README.rst

Configure an authoritative nameserver

This role installs and configures nsd to be an authoritative nameserver.

Role Variables

Required argument. The IPv4 addresses of the master nameserver.

Required argument. The IPv6 addresses of the master nameserver.